1. General Information
This Priceloop Privacy Notice (“Privacy Notice”) describes how we collect, process, and disclose information related to you as a natural person (“Personal Data”), and what rights you have with respect to the processing of your Personal Data.
Under the prerequisite that we act as Controller, this Privacy Notice applies when you:
• visit any of our websites or social media pages,
• access or use any of our applications or platforms,
• access our cloud application,
• register and/or attend to any events hosted or attended by Priceloop,
• contact our customer support,
• do business with us or,
• otherwise interact or communicate with us.
These services are hereinafter collectively referred to as the “Services”. If you decline to provide your Personal Data or ask us to delete it, you may not be able to access or use the Services.
Name of Controller and Data Protection Officer
When we refer to “Priceloop” in this Privacy Notice, we mean the Priceloop entity that is responsible for the means and purposes of the processing and therefore acts as the Controller of your Personal Data, as follows:
Priceloop GmbH Address:
Priceloop GmbH, Mehringdamm 33, 10961 Berlin
Legal representative: Dr. Richard Schwenke, Dat Tran
Contact details of Data Protection Officer: firstname.lastname@example.org
Any requests or questions related to data protection may be addressed to email@example.com
We may change or substitute this Privacy Notice at any time in our sole discretion. You should check back regularly for the most up-to-date version of this Privacy Notice and whenever you access one of our Services.
2. Data categories
The categories of data we process depend on your interactions with us and may include one or more of the following data categories.
Contact and business data
For the use of certain Services, contact data may be processed. Contact Data consists of last name, first name, email address, physical address, phone number, country of origin and similar contact information, including in some circumstances usernames and passwords. These may be supplemented by business data such as position, company name and other similar information.
Communication and transaction data
Communication data refers to the data resulting from your interaction with us, e.g., emails, chat messages, webinars visited, files downloaded, and product interest information. We may also collect registration information related to your attendance at one of our events, including travel information, scheduling information, food preferences or allergies, and accessibility requests.
Application-related usage data
As is true of most hosted services providers, we automatically gather and analyze information on how and whether specific features of our Services are used, such as details about which of our applications and versions are being used, user interactions with the Services (including searches and other actions taken by users), the pages and files viewed, which online trainings are attended, the types of data sources queried, the types of visualizations built, system configuration information, the number of steps in a workflow, the type(s) of operations used and the queries submitted, as well as hardware properties such as CPU type and amount of RAM, logfile data, and date and time stamps associated with use of the Services.
Some on-premise applications provide administrative tools that allow customers to opt out of the collection of Usage Data through the configuration settings. These options are not available for our hosted products, which automatically collect all Usage Data.
Device and browser data
When you visit one of our websites or applications, online and technical information from your computer or mobile device may be collected, such as: device type, location, information about the browser type and version, the operating system and version, the ISP or mobile carrier, the IP Address (or proxy server) and geographic areas derived from your IP address, time and date of access, duration of access, referring URL (if any), and identifiers that help us recognize your device and validate that you are a licensed user.
3. Origin of the data
4. Purposes for processing
We use the Personal Data collected as described in this Privacy Notice, as specified in any agreement that incorporates this Privacy Notice, or as disclosed to you in connection with the Services. We do not carry out any statistical evaluation of a data subject’s behavior (profiling); in particular, there is no automated decision-making (see Art. 22 Para. 1 and Para. 4 GDPR and Art. 6 Para. 1(b) GDPR).
4.1 Providing the requested service
We process your Personal Data to fulfill our contractual obligations to you, including to:
• Provide and deliver products and services (including updates thereto);
• Operate and improve our operations, systems, products and services;
• Understand your preferences to enhance your experience; and
• Provide service and support, such as sending confirmations, invoices, technical notices, updates, security alerts and administrative messages and providing customer support and troubleshooting.
Comments and questions
If you contact us via our website, via email or in any other way, we process your Personal Data to understand and respond to your request and to provide customer service. In such circumstances, your request might be internally forwarded to the responsible department at Priceloop.
Sales & Marketing activities
We may use your email address for direct advertising, to communicate news about upcoming events, products, and services, and for surveys. We also use your email address, which we receive in connection with the sale of a product or service, for direct advertising of products or services similar to the ones you ordered.Our marketing emails permit you to opt-out of receiving further communications by selecting the “unsubscribe” link. In addition, you may opt-out from marketing communication at any time by contacting firstname.lastname@example.org
To improve performance of the Services, to assess and improve the customer and user experience, to identify future opportunities for development of the Services, and to assess capacity requirements, we may analyze aggregated, anonymized or statistical information based on Personal Data.
Security & compliance
We may analyze your Personal Data to maintain the security of the Services and facilities, to enforce our terms and conditions; to protect against, investigate and deter fraudulent, unauthorized, or illegal activity; and to avoid and detect attacks on our website or applications or misuse of our Services.
5. Lawfulness of processing
When we collect and use your Personal Data, we will only do so where at least one of the following applies:
• We need to process your Personal Data to perform our responsibilities under our contract with you and to provide you with tools and services. [see Art.6 Para 1(b) GDPR]
• We have a legitimate interest to process your personal information. [see Art.6 Para 1(f) GDPR]
• You have given consent to process Personal Data. [see Art.6 Para. 1(a) GDPR]
• It is necessary for us to process your Personal Data to comply with a legal obligation. [see Art.6 Para. 1(c) GDPR]
6. Cookies and other tracking technologies
We use session-based and persistent “cookies” and similar technologies such as web beacons to increase user-friendliness and compile information about the usage of our websites and applications. Cookies are created either by us (first-party cookies) or by third-party providers determined by us (third-party cookies).
The following describes the types of further cookies we utilize:
• Necessary Cookies. Necessary Cookies are for basic website functionality, e.g., session cookies to transmit the website, authentication cookies, and security cookies. These cookies are strictly necessary for the operation of the website.Functional Cookies.
• Marketing Cookies. Marketing Cookies track activity across websites in order to understand your interests, to direct targeted advertising to you, and to track the performance of our advertisements.
Your Personal Data may be transferred to affiliates and partners of Priceloop as well as to a limited number of service providers (Processors) that perform processing operations such as database monitoring, hosting services, ticketing or provisioning of software tools. These service providers process Personal Data on our instructions only and have implemented state-of-the-art technical and organizational measures to safeguard the processed data. All Processors have been selected carefully and are closely monitored.
When we ask third parties to host or present at certain events like webinars or training, we may forward your Personal Data to the respective third party who may use this data to provide access to the event or may contact you for related marketing purposes.
If Personal Data is transferred to subsidiaries, partners service providers or third parties located outside the European Economic Area (EEA) which are not subject to an adequacy decision by the European Commission we will ensure that such recipient offers an adequate level of data protection, for instance by entering into EU Standard Contractual Clauses (SCCs) and implementing additional safeguards in accordance with legal requirements, or we will ask you for your prior individual consent to such international data transfers.
We may disclose your Personal Data to comply with legal requirements, such as in response to a court order or a subpoena. In such an event, we will use all reasonable and lawfully available measures to object to overbroad, unclear or otherwise inappropriate requests for information, and will cooperate with those seeking a protective order unless we are legally prohibited from doing so. We may also share Personal Data with our auditors, attorneys or other advisors under professional obligations of confidentiality in connection with corporate functions.
8. Duration of data storage
Your Personal Data will be deleted upon your request or as soon as it is no longer required to achieve the purpose for which the Personal Data has been collected, namely, to provide the requested Services. If legal regulations (e.g., by fiscal, commercial, or contractual law) apply that require longer storage of your Personal Data, or if we need your Personal Data to assert legal claims or defend against legal claims, we will store your Personal Data until the expiration of the corresponding storage period or until the settlement of the claims.
Any user account and its related data in applications where we act as Controller will be deleted upon your request or after three years of inactivity.
9. Your Rights
Upon request, we will inform you whether and which data we have stored about you. Insofar as the legal requirements are met, you have the right to have this data corrected, blocked or deleted. You also have the right to receive Personal Data which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another Controller under conditions and in accordance with the Regulation.
Insofar as we process your data on the basis of the balancing of interests, you have a right of objection if the legal requirements are met.
Where we are relying on consent to process your Personal Data you may withdraw your consent at any time for the future. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
You may exercise your rights by contacting us in writing, with a proof of your identity, at email@example.com
. If you are resident of the EU, you also have the right to direct questions or complaints to the lead supervisory authority.
California Privacy Rights
This section provides additional details about the Personal Data we collect about California residents and the rights afforded to them under the California Consumer Privacy Act or “CCPA.” We are extending the same rights to all residents of the U.S. For purposes of the CCPA, the defined term “Personal Data” is the same as the term “Personal Information” as such term is defined in the CCPA.
For more details about the Personal Data, we have collected over the last 12 months, including the categories of sources, please see respective sections above. We collect this information for the business and commercial purposes described above. We share this information with the categories of third parties described above. We do not sell, as such term is defined in the CCPA, the Personal Data we collect and will not sell or use it without providing a right to opt out. However, we do use third-party cookies for our advertising purposes. Further, we sometimes share Personal Data with our partners, or they share your Personal Data with us, but only if you have consented to have such information be shared.
Subject to certain limitations, the CCPA provides you the right to request to know more details about the categories or specific pieces of Personal Data we collect (including how we use and disclose this information), to delete your Personal Data, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
You may make a request pursuant to your rights under the CCPA by contacting us at firstname.lastname@example.org
. We will verify your request using the information associated with your account (if any), including email address. Government identification may be required. You can also designate an authorized agent to exercise these rights on your behalf.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.
Server log files
In server log files, the provider of the website automatically collects and stores information that your browser automatically sends to us. These are:
• Visited page on our domain
• Date and time of the server request
• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• IP address
This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Our website uses functions of the web analysis service Google Analytics. The provider of the web analytics service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies. These are small text files that your web browser stores on your end device and enable an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA. The setting of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the analysis of user behavior in order to optimize our web offer and, if necessary, advertising.•
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other states that are party to the Agreement on the European Economic Area before sending it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by Google Analytics is not merged with other Google data.•
The setting of cookies by your web browser can be prevented. However, some functions of our website could be restricted as a result. You can also prevent the collection of data regarding your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Opposition to data collection:
You can prevent the collection of your data by Google Analytics by clicking on the following link An opt-out cookie is set to prevent the collection of your information on future visits to our site: Disable Google Analytics.
In order to fully comply with the legal data protection requirements, we have concluded a contract with Google for order processing.•
Demographic characteristics in Google Analytics:
Our website uses the function "demographic characteristics" of Google Analytics. It can be used to generate reports that contain information about the age, gender and interests of visitors to the site. This data comes from interest-based advertising by Google as well as from visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this through the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Opting out of data collection".